##############
a while after start idle conections are closed
##############

openldap-6d9595dd5-7pkrm openldap 694156fa.178b48b5 0x76f46edfd6c0 conn=1062 fd=18 closed (connection lost)
openldap-6d9595dd5-7pkrm openldap 694156fa.178d768f 0x76f46cdf96c0 conn=1066 fd=20 closed (connection lost)
openldap-6d9595dd5-7pkrm openldap 694156fa.178eddfc 0x76f46f5fe6c0 conn=1064 fd=19 closed (connection lost)


##############
trying to login into kibana failed
##############

openldap-6d9595dd5-7pkrm openldap 6941582a.2668d3c6 0x76f46edfd6c0 conn=1070 fd=15 ACCEPT from IP=10.232.11.185:34806 (IP=0.0.0.0:10636)
openldap-6d9595dd5-7pkrm openldap 6941582a.2786a93f 0x76f46f5fe6c0 conn=1070 fd=15 TLS established tls_ssf=256 ssf=256 tls_proto=TLS1.3 tls_cipher=AES-256-GCM
openldap-6d9595dd5-7pkrm openldap 6941582a.279e14de 0x76f46edfd6c0 conn=1070 op=0 BIND dn="cn=admin,dc=planetexpress,dc=com" method=128
openldap-6d9595dd5-7pkrm openldap 6941582a.27a03009 0x76f46edfd6c0 conn=1070 op=0 BIND dn="cn=admin,dc=planetexpress,dc=com" mech=SIMPLE bind_ssf=0 ssf=256
openldap-6d9595dd5-7pkrm openldap 6941582a.27a3d191 0x76f46edfd6c0 conn=1070 op=0 RESULT tag=97 err=0 qtime=0.000040 etime=0.000476 text=
rortest-es-default-0 elasticsearch {"type": "server", "timestamp": "2025-12-16T13:01:30,666Z", "level": "ERROR", "component": "t.b.r.a.b.d.l.i.UnboundidLdapUsersService", "cluster.name": "rortest", "node.name": "rortest-es-default-0", "message": "[01b251c6-c5e4-4000-89a7-87800ee95619-163496788#1113183] LDAP search user - returned error: [code=81, cause=result code='81 (server down)' diagnostic message='The connection to the directory server was closed while waiting for a response to an asynchronous request:  An I/O error occurred while trying to read the response from the server:  SocketException(Connection reset), ldapSDKVersion=6.0.11, revision=8b21d0a4c6eb8b5c3e60a96fc3e9e13b9c2f650f']", "cluster.uuid": "ZeqklD3FSSaPPUAzdSdXsA", "node.id": "tc01WEJsSXiZMDeTTe6JtQ"  }
rortest-es-default-0 elasticsearch {"type": "server", "timestamp": "2025-12-16T13:01:30,667Z", "level": "ERROR", "component": "t.b.r.a.b.Block", "cluster.name": "rortest", "node.name": "rortest-es-default-0", "message": "[01b251c6-c5e4-4000-89a7-87800ee95619-163496788#1113183] ldap_group: admin_staff: ldap_auth rule matching got an error LDAP returned code: server down [81], cause: result code='81 (server down)' diagnostic message='The connection to the directory server was closed while waiting for a response to an asynchronous request:  An I/O error occurred while trying to read the response from the server:  SocketException(Connection reset), ldapSDKVersion=6.0.11, revision=8b21d0a4c6eb8b5c3e60a96fc3e9e13b9c2f650f'", "cluster.uuid": "ZeqklD3FSSaPPUAzdSdXsA", "node.id": "tc01WEJsSXiZMDeTTe6JtQ" ,
rortest-es-default-0 elasticsearch "stacktrace": ["tech.beshu.ror.accesscontrol.blocks.definitions.ldap.implementations.LdapUnexpectedResult: LDAP returned code: server down [81], cause: result code='81 (server down)' diagnostic message='The connection to the directory server was closed while waiting for a response to an asynchronous request:  An I/O error occurred while trying to read the response from the server:  SocketException(Connection reset), ldapSDKVersion=6.0.11, revision=8b21d0a4c6eb8b5c3e60a96fc3e9e13b9c2f650f'",
rortest-es-default-0 elasticsearch "at tech.beshu.ror.accesscontrol.blocks.definitions.ldap.implementations.LdapUnexpectedResult$.apply(UnboundidLdapUsersService.scala:112) ~[?:?]",
rortest-es-default-0 elasticsearch "at tech.beshu.ror.accesscontrol.blocks.definitions.ldap.implementations.UnboundidLdapUsersService.fetchLdapUser$$anonfun$2(UnboundidLdapUsersService.scala:77) ~[?:?]",
rortest-es-default-0 elasticsearch "at map @ tech.beshu.ror.accesscontrol.blocks.definitions.ldap.implementations.UnboundidLdapConnectionPool.process(UnboundidLdapConnectionPool.scala:44) ~[?:?]",
rortest-es-default-0 elasticsearch "at flatMap @ tech.beshu.ror.accesscontrol.blocks.definitions.ldap.implementations.UnboundidLdapConnectionPool.process(UnboundidLdapConnectionPool.scala:45) ~[?:?]",
rortest-es-default-0 elasticsearch "at flatMap @ tech.beshu.ror.accesscontrol.blocks.definitions.ldap.implementations.UnboundidLdapUsersService.fetchLdapUser(UnboundidLdapUsersService.scala:66) ~[?:?]",
rortest-es-default-0 elasticsearch "at flatMap @ tech.beshu.ror.accesscontrol.blocks.definitions.ldap.implementations.UnboundidLdapAuthenticationService.doAuthenticate(UnboundidLdapAuthenticationService.scala:50) ~[?:?]",
rortest-es-default-0 elasticsearch "at map @ tech.beshu.ror.utils.TaskOps$.andThen$extension(TaskOps.scala:30) ~[?:?]",
openldap-6d9595dd5-7pkrm openldap 6941582a.281114b8 0x76f46cdf96c0 conn=1070 op=1 SRCH base="ou=people,dc=planetexpress,dc=com" scope=2 deref=0 filter="(uid=fry)"
openldap-6d9595dd5-7pkrm openldap 6941582a.2819ec61 0x76f46cdf96c0 conn=1070 op=1 SEARCH RESULT tag=101 err=0 qtime=0.000045 etime=0.000701 nentries=1 text=
rortest-es-default-0 elasticsearch "at map @ tech.beshu.ror.accesscontrol.blocks.rules.auth.base.BaseBasicAuthAuthenticationRule.tryToAuthenticateUser$$anonfun$1(BaseBasicAuthAuthenticationRule.scala:47) ~[?:?]",
rortest-es-default-0 elasticsearch "at flatMap @ tech.beshu.ror.accesscontrol.blocks.rules.auth.base.BaseBasicAuthAuthenticationRule.tryToAuthenticateUser(BaseBasicAuthAuthenticationRule.scala:40) ~[?:?]",
rortest-es-default-0 elasticsearch "at flatMap @ tech.beshu.ror.accesscontrol.blocks.rules.auth.base.BaseAuthenticationRule.authenticate(BaseAuthenticationRule.scala:33) ~[?:?]",
rortest-es-default-0 elasticsearch "at flatMap @ tech.beshu.ror.accesscontrol.blocks.rules.Rule$AuthRule.check(Rule.scala:140) ~[?:?]",
rortest-es-default-0 elasticsearch "at liftF @ tech.beshu.ror.accesscontrol.blocks.Block$Lifter.apply(Block.scala:186) ~[?:?]",
rortest-es-default-0 elasticsearch "at flatMap @ tech.beshu.ror.accesscontrol.blocks.Block.execute$$anonfun$1(Block.scala:62) ~[?:?]",
rortest-es-default-0 elasticsearch "at map @ tech.beshu.ror.accesscontrol.blocks.Block.execute$$anonfun$1$$anonfun$1(Block.scala:62) ~[?:?]",
rortest-es-default-0 elasticsearch "at runAsync @ tech.beshu.ror.es.IndexLevelActionFilter.handleRequest(IndexLevelActionFilter.scala:205) ~[?:?]",
rortest-es-default-0 elasticsearch "at liftF @ tech.beshu.ror.accesscontrol.blocks.Block$Lifter.apply(Block.scala:186) ~[?:?]"] }
openldap-6d9595dd5-7pkrm openldap 6941582a.286b06c1 0x76f46f5fe6c0 conn=1071 fd=16 ACCEPT from IP=10.232.11.185:34810 (IP=0.0.0.0:10636)
openldap-6d9595dd5-7pkrm openldap 6941582a.297e13f8 0x76f46cdf96c0 conn=1071 fd=16 TLS established tls_ssf=256 ssf=256 tls_proto=TLS1.3 tls_cipher=AES-256-GCM
openldap-6d9595dd5-7pkrm openldap 6941582a.298a4583 0x76f46f5fe6c0 conn=1071 op=0 BIND dn="cn=admin,dc=planetexpress,dc=com" method=128
openldap-6d9595dd5-7pkrm openldap 6941582a.298b9790 0x76f46f5fe6c0 conn=1071 op=0 BIND dn="cn=admin,dc=planetexpress,dc=com" mech=SIMPLE bind_ssf=0 ssf=256
openldap-6d9595dd5-7pkrm openldap 6941582a.298cddde 0x76f46f5fe6c0 conn=1071 op=0 RESULT tag=97 err=0 qtime=0.000023 etime=0.000231 text=
openldap-6d9595dd5-7pkrm openldap 6941582a.299d03ec 0x76f46edfd6c0 conn=1071 op=1 BIND anonymous mech=implicit bind_ssf=0 ssf=256
openldap-6d9595dd5-7pkrm openldap 6941582a.299e77fa 0x76f46edfd6c0 conn=1071 op=1 BIND dn="cn=Philip J. Fry,ou=people,dc=planetexpress,dc=com" method=128
openldap-6d9595dd5-7pkrm openldap 6941582a.299fa6d5 0x76f46edfd6c0 conn=1071 op=1 BIND dn="cn=Philip J. Fry,ou=people,dc=planetexpress,dc=com" mech=SIMPLE bind_ssf=0 ssf=256
openldap-6d9595dd5-7pkrm openldap 6941582a.29a17fb0 0x76f46edfd6c0 conn=1071 op=1 RESULT tag=97 err=0 qtime=0.000025 etime=0.000320 text=
openldap-6d9595dd5-7pkrm openldap 6941582a.29ae626d 0x76f46cdf96c0 conn=1071 op=2 BIND anonymous mech=implicit bind_ssf=0 ssf=256
openldap-6d9595dd5-7pkrm openldap 6941582a.29b06af3 0x76f46cdf96c0 conn=1071 op=2 BIND dn="cn=admin,dc=planetexpress,dc=com" method=128
openldap-6d9595dd5-7pkrm openldap 6941582a.29b12b8f 0x76f46cdf96c0 conn=1071 op=2 BIND dn="cn=admin,dc=planetexpress,dc=com" mech=SIMPLE bind_ssf=0 ssf=256
openldap-6d9595dd5-7pkrm openldap 6941582a.29b2a832 0x76f46cdf96c0 conn=1071 op=2 RESULT tag=97 err=0 qtime=0.000023 etime=0.000304 text=
openldap-6d9595dd5-7pkrm openldap 6941582a.29c9dc41 0x76f46f5fe6c0 conn=1070 op=2 SRCH base="ou=people,dc=planetexpress,dc=com" scope=2 deref=0 filter="(uid=fry)"
openldap-6d9595dd5-7pkrm openldap 6941582a.29ce6324 0x76f46f5fe6c0 conn=1070 op=2 SEARCH RESULT tag=101 err=0 qtime=0.000021 etime=0.000352 nentries=1 text=
openldap-6d9595dd5-7pkrm openldap 6941582a.2a22a1f3 0x76f46edfd6c0 conn=1072 fd=17 ACCEPT from IP=10.232.11.185:34826 (IP=0.0.0.0:10636)
openldap-6d9595dd5-7pkrm openldap 6941582a.2b1dee29 0x76f46f5fe6c0 conn=1072 fd=17 TLS established tls_ssf=256 ssf=256 tls_proto=TLS1.3 tls_cipher=AES-256-GCM
openldap-6d9595dd5-7pkrm openldap 6941582a.2b32422c 0x76f46edfd6c0 conn=1072 op=0 BIND dn="cn=admin,dc=planetexpress,dc=com" method=128
openldap-6d9595dd5-7pkrm openldap 6941582a.2b348c2f 0x76f46edfd6c0 conn=1072 op=0 BIND dn="cn=admin,dc=planetexpress,dc=com" mech=SIMPLE bind_ssf=0 ssf=256
openldap-6d9595dd5-7pkrm openldap 6941582a.2b3671ba 0x76f46edfd6c0 conn=1072 op=0 RESULT tag=97 err=0 qtime=0.000028 etime=0.000345 text=
rortest-es-default-0 elasticsearch {"type": "server", "timestamp": "2025-12-16T13:01:30,725Z", "level": "ERROR", "component": "t.b.r.a.b.d.l.i.UnboundidLdapDefaultGroupSearchAuthorizationServiceWithServerSideGroupsFiltering", "cluster.name": "rortest", "node.name": "rortest-es-default-0", "message": "[01b251c6-c5e4-4000-89a7-87800ee95619-163496788#1113183] LDAP getting user groups returned error: [code=81 (server down), cause=result code='81 (server down)' diagnostic message='The connection to the directory server was closed while waiting for a response to an asynchronous request:  An I/O error occurred while trying to read the response from the server:  SocketException(Connection reset), ldapSDKVersion=6.0.11, revision=8b21d0a4c6eb8b5c3e60a96fc3e9e13b9c2f650f']", "cluster.uuid": "ZeqklD3FSSaPPUAzdSdXsA", "node.id": "tc01WEJsSXiZMDeTTe6JtQ"  }
rortest-es-default-0 elasticsearch {"type": "server", "timestamp": "2025-12-16T13:01:30,727Z", "level": "ERROR", "component": "t.b.r.a.b.Block", "cluster.name": "rortest", "node.name": "rortest-es-default-0", "message": "[01b251c6-c5e4-4000-89a7-87800ee95619-163496788#1113183] ldap_group: ship_crew: ldap_auth rule matching got an error LDAP returned code: server down [81], cause: result code='81 (server down)' diagnostic message='The connection to the directory server was closed while waiting for a response to an asynchronous request:  An I/O error occurred while trying to read the response from the server:  SocketException(Connection reset), ldapSDKVersion=6.0.11, revision=8b21d0a4c6eb8b5c3e60a96fc3e9e13b9c2f650f'", "cluster.uuid": "ZeqklD3FSSaPPUAzdSdXsA", "node.id": "tc01WEJsSXiZMDeTTe6JtQ" ,
rortest-es-default-0 elasticsearch "stacktrace": ["tech.beshu.ror.accesscontrol.blocks.definitions.ldap.implementations.LdapUnexpectedResult: LDAP returned code: server down [81], cause: result code='81 (server down)' diagnostic message='The connection to the directory server was closed while waiting for a response to an asynchronous request:  An I/O error occurred while trying to read the response from the server:  SocketException(Connection reset), ldapSDKVersion=6.0.11, revision=8b21d0a4c6eb8b5c3e60a96fc3e9e13b9c2f650f'",
rortest-es-default-0 elasticsearch "at tech.beshu.ror.accesscontrol.blocks.definitions.ldap.implementations.LdapUnexpectedResult$.apply(UnboundidLdapUsersService.scala:112) ~[?:?]",
rortest-es-default-0 elasticsearch "at tech.beshu.ror.accesscontrol.blocks.definitions.ldap.implementations.UnboundidLdapDefaultGroupSearchAuthorizationServiceWithServerSideGroupsFiltering.groupsFrom$$anonfun$2(UnboundidLdapDefaultGroupSearchAuthorizationServiceWithServerSideGroupsFiltering.scala:86) ~[?:?]",
rortest-es-default-0 elasticsearch "at map @ tech.beshu.ror.accesscontrol.blocks.definitions.ldap.implementations.UnboundidLdapConnectionPool.process(UnboundidLdapConnectionPool.scala:44) ~[?:?]",
rortest-es-default-0 elasticsearch "at flatMap @ tech.beshu.ror.accesscontrol.blocks.definitions.ldap.implementations.UnboundidLdapConnectionPool.process(UnboundidLdapConnectionPool.scala:45) ~[?:?]",
rortest-es-default-0 elasticsearch "at flatMap @ tech.beshu.ror.accesscontrol.blocks.definitions.ldap.implementations.UnboundidLdapDefaultGroupSearchAuthorizationServiceWithServerSideGroupsFiltering.groupsFrom(UnboundidLdapDefaultGroupSearchAuthorizationServiceWithServerSideGroupsFiltering.scala:75) ~[?:?]",
rortest-es-default-0 elasticsearch "at map @ tech.beshu.ror.accesscontrol.blocks.definitions.ldap.implementations.UnboundidLdapConnectionPool.process(UnboundidLdapConnectionPool.scala:44) ~[?:?]",
rortest-es-default-0 elasticsearch "at flatMap @ tech.beshu.ror.accesscontrol.blocks.definitions.ldap.implementations.UnboundidLdapConnectionPool.process(UnboundidLdapConnectionPool.scala:45) ~[?:?]",
rortest-es-default-0 elasticsearch "at flatMap @ tech.beshu.ror.accesscontrol.blocks.definitions.ldap.implementations.UnboundidLdapUsersService.fetchLdapUser(UnboundidLdapUsersService.scala:66) ~[?:?]",
rortest-es-default-0 elasticsearch "at flatMap @ tech.beshu.ror.accesscontrol.blocks.definitions.ldap.implementations.UnboundidLdapDefaultGroupSearchAuthorizationServiceWithServerSideGroupsFiltering.doFetchGroupsOf(UnboundidLdapDefaultGroupSearchAuthorizationServiceWithServerSideGroupsFiltering.scala:63) ~[?:?]",
rortest-es-default-0 elasticsearch "at map @ tech.beshu.ror.utils.TaskOps$.andThen$extension(TaskOps.scala:30) ~[?:?]",
rortest-es-default-0 elasticsearch "at map @ tech.beshu.ror.accesscontrol.blocks.rules.auth.base.BaseAuthorizationRule.authorizeLoggedUser(BaseAuthorizationRule.scala:101) ~[?:?]",
rortest-es-default-0 elasticsearch "at map @ tech.beshu.ror.accesscontrol.blocks.rules.auth.base.BaseAuthorizationRule.authorizeLoggedUser(BaseAuthorizationRule.scala:102) ~[?:?]",
rortest-es-default-0 elasticsearch "at map @ tech.beshu.ror.utils.TaskOps$.measure$extension$$anonfun$1$$anonfun$2(TaskOps.scala:60) ~[?:?]",
rortest-es-default-0 elasticsearch "at map @ tech.beshu.ror.accesscontrol.blocks.definitions.ldap.implementations.UnboundidLdapAuthenticationService.ldapAuthenticate(UnboundidLdapAuthenticationService.scala:62) ~[?:?]",
rortest-es-default-0 elasticsearch "at map @ tech.beshu.ror.accesscontrol.blocks.definitions.ldap.implementations.UnboundidLdapConnectionPool.process(UnboundidLdapConnectionPool.scala:44) ~[?:?]",
rortest-es-default-0 elasticsearch "at flatMap @ tech.beshu.ror.accesscontrol.blocks.definitions.ldap.implementations.UnboundidLdapConnectionPool.process(UnboundidLdapConnectionPool.scala:45) ~[?:?]"] }
rortest-es-default-0 elasticsearch {"type": "server", "timestamp": "2025-12-16T13:01:30,733Z", "level": "INFO", "component": "t.b.r.a.l.AccessControlListLoggingDecorator", "cluster.name": "rortest", "node.name": "rortest-es-default-0", "message": "\u001B[35mFORBIDDEN by default req={ ID:01b251c6-c5e4-4000-89a7-87800ee95619-163496788#1113183, TYP:RRUserMetadataRequest, CGR:<N/A>, USR:fry (attempted), BRS:true, KDX:null, ACT:cluster:internal_ror/user_metadata/get, OA:10.232.14.134/32, XFF:null, DA:10.232.11.185/32, IDX:<N/A>, MET:GET, PTH:/_readonlyrest/metadata/current_user, CNT:<N/A>, HDR:Accept-Encoding=gzip,deflate, Host=rortest-es-http.rortest.svc:9200, Accept=*/*, User-Agent=node-fetch/1.0 (+https://github.com/bitinn/node-fetch), content-length=0, cookie=__Host-ror.x-csrf-token-MC4wLjAuMDo1NjAx-session_id=49a91fe2922ac48186873867fd08865c; __Host-ror.x-csrf-token-MC4wLjAuMDo1NjAx=4bdde8c8f2703d5d79883f0a1651ac1c33180a8c2e131618385f1c974c020cff.d6e2ab8c49d638caf502ca88c71f8f89114dfc5b2ba145b0b83ffca16e4e5caccaa60aca3395b974b9a361b0c958458890a62249859c304e6249aaa1b53bf8a9, x-ror-correlation-id=01b251c6-c5e4-4000-89a7-87800ee95619, Connection=close, Authorization=<OMITTED>, HIS:[ELASTIC-INTERNAL-> RULES:[auth_key->false]], [ELASTIC INTERNAL PROBE-> RULES:[auth_key->false]], [Kibana service account-> RULES:[token_authentication->false]], [Admin access-> RULES:[auth_key->false]], [ldap_group: admin_staff-> RULES:[ldap_auth->false]], [ldap_group: ship_crew-> RULES:[ldap_auth->false]], }\u001B[0m", "cluster.uuid": "ZeqklD3FSSaPPUAzdSdXsA", "node.id": "tc01WEJsSXiZMDeTTe6JtQ"  }
rortest-kb-9d6b45f95-vrr4z kibana [2025-12-16T13:01:30.739+00:00][info][plugins][ReadonlyREST][authController][x-ror-correlation-id=01b251c6-c5e4-4000-89a7-87800ee95619] Could not login in: Forbidden by ReadonlyREST ES plugin.

##############
trying to login into kibana again after a few minutes: success
##############

openldap-6d9595dd5-7pkrm openldap 694158b8.030a8221 0x76f46cdf96c0 conn=1070 op=3 SRCH base="ou=people,dc=planetexpress,dc=com" scope=2 deref=0 filter="(uid=fry)"
openldap-6d9595dd5-7pkrm openldap 694158b8.0312ba2e 0x76f46cdf96c0 conn=1070 op=3 SEARCH RESULT tag=101 err=0 qtime=0.000040 etime=0.000661 nentries=1 text=
openldap-6d9595dd5-7pkrm openldap 694158b8.03333c5e 0x76f46f5fe6c0 conn=1071 op=3 BIND anonymous mech=implicit bind_ssf=0 ssf=256
openldap-6d9595dd5-7pkrm openldap 694158b8.0335371b 0x76f46f5fe6c0 conn=1071 op=3 BIND dn="cn=Philip J. Fry,ou=people,dc=planetexpress,dc=com" method=128
openldap-6d9595dd5-7pkrm openldap 694158b8.0336e7a5 0x76f46f5fe6c0 conn=1071 op=3 BIND dn="cn=Philip J. Fry,ou=people,dc=planetexpress,dc=com" mech=SIMPLE bind_ssf=0 ssf=256
openldap-6d9595dd5-7pkrm openldap 694158b8.0338ec07 0x76f46f5fe6c0 conn=1071 op=3 RESULT tag=97 err=0 qtime=0.000037 etime=0.000413 text=
openldap-6d9595dd5-7pkrm openldap 694158b8.0365a117 0x76f46edfd6c0 conn=1071 op=4 BIND anonymous mech=implicit bind_ssf=0 ssf=256
openldap-6d9595dd5-7pkrm openldap 694158b8.036855c2 0x76f46edfd6c0 conn=1071 op=4 BIND dn="cn=admin,dc=planetexpress,dc=com" method=128
openldap-6d9595dd5-7pkrm openldap 694158b8.03699e01 0x76f46edfd6c0 conn=1071 op=4 BIND dn="cn=admin,dc=planetexpress,dc=com" mech=SIMPLE bind_ssf=0 ssf=256
openldap-6d9595dd5-7pkrm openldap 694158b8.036c0701 0x76f46edfd6c0 conn=1071 op=4 RESULT tag=97 err=0 qtime=0.000027 etime=0.000444 text=
openldap-6d9595dd5-7pkrm openldap 694158b8.03858f64 0x76f46cdf96c0 conn=1070 op=4 SRCH base="ou=people,dc=planetexpress,dc=com" scope=2 deref=0 filter="(uid=fry)"
openldap-6d9595dd5-7pkrm openldap 694158b8.038c8fd6 0x76f46cdf96c0 conn=1070 op=4 SEARCH RESULT tag=101 err=0 qtime=0.000025 etime=0.000525 nentries=1 text=
openldap-6d9595dd5-7pkrm openldap 694158b8.03aa93f4 0x76f46f5fe6c0 conn=1072 op=1 SRCH base="ou=people,dc=planetexpress,dc=com" scope=2 deref=0 filter="(&(objectClass=*)(member=cn=philip j. fry,ou=people,dc=planetexpress,dc=com))"
openldap-6d9595dd5-7pkrm openldap 694158b8.03abe873 0x76f46f5fe6c0 conn=1072 op=1 SRCH attr=cn
openldap-6d9595dd5-7pkrm openldap 694158b8.03b15fa5 0x76f46f5fe6c0 conn=1072 op=1 SEARCH RESULT tag=101 err=0 qtime=0.000024 etime=0.000531 nentries=1 text=
openldap-6d9595dd5-7pkrm openldap 694158b8.03d6254d 0x76f46edfd6c0 conn=1070 op=5 SRCH base="ou=people,dc=planetexpress,dc=com" scope=2 deref=0 filter="(uid=fry)"
openldap-6d9595dd5-7pkrm openldap 694158b8.03e02d1c 0x76f46edfd6c0 conn=1070 op=5 SEARCH RESULT tag=101 err=0 qtime=0.000038 etime=0.000756 nentries=1 text=
openldap-6d9595dd5-7pkrm openldap 694158b8.03f30851 0x76f46cdf96c0 conn=1071 op=5 BIND anonymous mech=implicit bind_ssf=0 ssf=256
openldap-6d9595dd5-7pkrm openldap 694158b8.03f4c708 0x76f46cdf96c0 conn=1071 op=5 BIND dn="cn=Philip J. Fry,ou=people,dc=planetexpress,dc=com" method=128
openldap-6d9595dd5-7pkrm openldap 694158b8.03f63519 0x76f46cdf96c0 conn=1071 op=5 BIND dn="cn=Philip J. Fry,ou=people,dc=planetexpress,dc=com" mech=SIMPLE bind_ssf=0 ssf=256
openldap-6d9595dd5-7pkrm openldap 694158b8.03f80907 0x76f46cdf96c0 conn=1071 op=5 RESULT tag=97 err=0 qtime=0.000033 etime=0.000362 text=
openldap-6d9595dd5-7pkrm openldap 694158b8.0408e55c 0x76f46f5fe6c0 conn=1071 op=6 BIND anonymous mech=implicit bind_ssf=0 ssf=256
openldap-6d9595dd5-7pkrm openldap 694158b8.040a5005 0x76f46f5fe6c0 conn=1071 op=6 BIND dn="cn=admin,dc=planetexpress,dc=com" method=128
openldap-6d9595dd5-7pkrm openldap 694158b8.040d672c 0x76f46f5fe6c0 conn=1071 op=6 BIND dn="cn=admin,dc=planetexpress,dc=com" mech=SIMPLE bind_ssf=0 ssf=256
openldap-6d9595dd5-7pkrm openldap 694158b8.0410b1e6 0x76f46f5fe6c0 conn=1071 op=6 RESULT tag=97 err=0 qtime=0.000023 etime=0.000536 text=
openldap-6d9595dd5-7pkrm openldap 694158b8.0427cae0 0x76f46edfd6c0 conn=1070 op=6 SRCH base="ou=people,dc=planetexpress,dc=com" scope=2 deref=0 filter="(uid=fry)"
openldap-6d9595dd5-7pkrm openldap 694158b8.0430d91f 0x76f46edfd6c0 conn=1070 op=6 SEARCH RESULT tag=101 err=0 qtime=0.000038 etime=0.000687 nentries=1 text=
openldap-6d9595dd5-7pkrm openldap 694158b8.044753ef 0x76f46cdf96c0 conn=1072 op=2 SRCH base="ou=people,dc=planetexpress,dc=com" scope=2 deref=0 filter="(&(objectClass=*)(member=cn=philip j. fry,ou=people,dc=planetexpress,dc=com))"
openldap-6d9595dd5-7pkrm openldap 694158b8.0448bf2a 0x76f46cdf96c0 conn=1072 op=2 SRCH attr=cn
openldap-6d9595dd5-7pkrm openldap 694158b8.044cce89 0x76f46cdf96c0 conn=1072 op=2 SEARCH RESULT tag=101 err=0 qtime=0.000023 etime=0.000439 nentries=1 text=
rortest-es-default-0 elasticsearch {"type": "server", "timestamp": "2025-12-16T13:03:52,074Z", "level": "INFO", "component": "t.b.r.a.l.AccessControlListLoggingDecorator", "cluster.name": "rortest", "node.name": "rortest-es-default-0", "message": "\u001B[36mALLOWED by { name: 'ldap_group: ship_crew', policy: ALLOW, rules: [ldap_auth, kibana] req={ ID:36173064-a54a-4dd1-84fb-df2662f9d492-714865318#1114758, TYP:RRUserMetadataRequest, CGR:ship_crew, USR:fry, BRS:true, KDX:.kibana, ACT:cluster:internal_ror/user_metadata/get, OA:10.232.14.134/32, XFF:null, DA:10.232.11.185/32, IDX:<N/A>, MET:GET, PTH:/_readonlyrest/metadata/current_user, CNT:<N/A>, HDR:Accept-Encoding=gzip,deflate, Host=rortest-es-http.rortest.svc:9200, Accept=*/*, User-Agent=node-fetch/1.0 (+https://github.com/bitinn/node-fetch), content-length=0, x-ror-correlation-id=36173064-a54a-4dd1-84fb-df2662f9d492, cookie=__Host-ror.x-csrf-token-MC4wLjAuMDo1NjAx-session_id=49a91fe2922ac48186873867fd08865c; __Host-ror.x-csrf-token-MC4wLjAuMDo1NjAx=4bdde8c8f2703d5d79883f0a1651ac1c33180a8c2e131618385f1c974c020cff.d6e2ab8c49d638caf502ca88c71f8f89114dfc5b2ba145b0b83ffca16e4e5caccaa60aca3395b974b9a361b0c958458890a62249859c304e6249aaa1b53bf8a9, Connection=close, Authorization=<OMITTED>, HIS:[ELASTIC-INTERNAL-> RULES:[auth_key->false]], [ELASTIC INTERNAL PROBE-> RULES:[auth_key->false]], [Kibana service account-> RULES:[token_authentication->false]], [Admin access-> RULES:[auth_key->false]], [ldap_group: admin_staff-> RULES:[ldap_auth->false]], [ldap_group: ship_crew-> RULES:[ldap_auth->true, kibana->true] RESOLVED:[user=fry;group=ship_crew;av_groups=ship_crew;kibana_idx=.kibana]], }\u001B[0m", "cluster.uuid": "ZeqklD3FSSaPPUAzdSdXsA", "node.id": "tc01WEJsSXiZMDeTTe6JtQ"  }
```